Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: InqMfdrFMB3SunqKl/YBnbAmczhW8U1KNP5HfRKVI/A=
Subject key identifier: 94:E3:AF:C6:9C:7C:EB:68:FE:9D:1B:23:88:28:B2:7F:D6:86:71:11
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 0198D473727705522E242B3E8321B2792DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 026C
Signing time: Sat 23 Aug 2025 01:03:12 +0000
Manifest this update: Sat 23 Aug 2025 01:03:12 +0000
Manifest next update: Sun 24 Aug 2025 01:03:12 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: GcLZRZ2CcV7LE3dy5o33suCAroFSqqOEYIbN4lRUeHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:72:77:05:52:2e:24:2b:3e:83:21:b2:79:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Aug 23 01:03:12 2025 GMT
Not After : Aug 24 01:03:12 2025 GMT
Subject: CN=94e3afc69c7ceb68fe9d1b238828b27fd6867111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:f8:77:f5:61:83:aa:81:77:6b:7b:65:fc:
7e:ce:ef:90:55:c8:b6:79:d7:4a:ee:ab:c6:d3:66:
1f:b4:e3:c6:85:d8:b7:da:22:27:b5:16:55:ed:40:
ac:63:af:05:ca:cd:c7:66:b5:e2:a8:3e:dc:9d:ac:
6d:91:03:0a:b0:90:8c:0e:c7:7c:f7:ed:a0:a1:a3:
c9:53:dd:cc:d0:38:cc:d0:31:82:64:7a:6b:4f:a7:
00:e4:96:fa:98:7b:a1:9d:24:4d:31:a9:d6:f0:98:
e6:95:c5:dd:2f:38:30:98:3f:91:58:77:08:3b:b7:
52:dd:c6:e3:9e:d0:ad:29:e8:12:64:bf:20:f5:b4:
15:51:91:ea:fa:67:de:97:99:1f:d2:a6:c7:90:8c:
e3:7e:e6:88:a3:3a:69:3f:ba:67:8a:6d:f5:93:c4:
ff:42:30:ea:e5:b6:4b:33:fa:06:83:3b:19:bf:57:
de:61:9b:67:e7:f1:ce:26:1b:51:2f:f4:73:1f:3f:
1d:2e:f9:77:02:a5:19:6c:0f:d1:62:4e:67:a4:28:
81:5a:4d:ca:f6:37:ab:71:01:eb:c6:e2:23:43:dc:
db:f9:59:82:86:f4:1b:a2:6a:96:c0:0c:db:97:79:
0f:75:11:12:b6:c9:2f:54:90:b3:57:48:df:60:00:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:AF:C6:9C:7C:EB:68:FE:9D:1B:23:88:28:B2:7F:D6:86:71:11
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:16:6a:71:b3:b2:32:c3:8a:9f:2d:7c:24:91:99:42:0c:d4:
23:f8:8b:79:be:2e:cd:36:01:8d:4e:0c:21:41:24:7c:09:22:
90:dd:95:b9:2a:b2:e2:65:55:f1:01:00:98:09:83:1d:0f:5f:
f4:a9:2f:f7:9c:e6:99:ab:3a:62:b4:44:9f:d0:c3:a7:ab:85:
b1:c7:b2:93:9b:35:6a:78:13:9a:33:60:4c:73:ee:ff:51:ab:
e9:e4:8b:f2:43:52:b8:ea:ff:ef:1a:90:62:85:01:73:1b:ea:
8d:8f:b7:2e:d5:e6:26:d2:8c:05:ea:62:21:48:05:a4:d5:3b:
34:79:f6:44:0e:f5:99:7a:76:42:98:d9:54:26:44:37:b9:4f:
48:a9:6f:23:4f:ac:dd:d3:71:24:a3:2d:05:e0:52:78:7a:5a:
b5:de:47:a0:5a:b1:a8:91:fb:90:59:47:15:64:1b:08:aa:95:
13:f5:d0:0e:15:52:8f:a4:f7:d6:8d:58:59:2b:b2:97:a0:55:
88:f4:20:9b:79:69:9d:5f:9a:27:f5:2c:f4:9d:cf:c1:66:60:
0b:6c:94:36:d0:9f:6a:91:2d:10:68:fb:d5:7a:89:07:bd:e4:
f1:29:26:bf:8a:19:fb:d1:42:04:73:d0:b6:cb:fe:ca:53:de:
4d:25:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:52 2025 by rpki-client